Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232302e302f32322d3234203d3e203532343638.roa
File:                     3138312e37382e3232302e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          URfi2BLb5jJpXGBx+K1hyekqlmiv2WgD3prZdmEVbdg=
Subject key identifier:   B4:FC:E8:02:11:2B:6E:6D:B1:93:12:0F:03:58:7B:61:E4:78:D0:75
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       0B7DBD0E111F5EE0DE0FE40EDB76876368607577
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232302e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:30 +0000
ROA not before:           Tue 05 Mar 2024 17:59:30 +0000
ROA not after:            Tue 04 Mar 2025 18:04:30 +0000
asID:                     52468
IP address blocks:        181.78.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 02:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7d:bd:0e:11:1f:5e:e0:de:0f:e4:0e:db:76:87:63:68:60:75:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:30 2024 GMT
            Not After : Mar  4 18:04:30 2025 GMT
        Subject: CN=B4FCE802112B6E6DB193120F03587B61E478D075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:a4:02:c3:66:68:65:b9:37:b6:45:a8:9f:
                    3a:c2:0e:df:fd:40:19:07:50:e5:af:be:95:04:e9:
                    87:da:c0:19:d2:d3:0e:91:5a:7e:8b:ce:30:9c:c2:
                    4a:ee:00:dd:53:b6:6c:fd:aa:9d:88:9a:48:37:79:
                    8b:eb:53:25:df:a2:80:e0:af:32:68:73:0a:ce:e8:
                    51:a3:5d:70:43:fc:53:11:91:6d:10:66:ef:85:f1:
                    59:be:ee:2f:4c:58:c3:69:22:2b:60:02:6e:ce:2b:
                    a8:af:38:fd:c0:0b:d1:b8:1d:ee:7b:60:2d:61:69:
                    c3:f8:30:e0:98:da:06:ef:78:63:38:62:28:1a:05:
                    fb:4a:b8:7b:14:ca:d9:e4:f1:b4:6f:34:5d:c0:ad:
                    7a:1e:05:ac:d8:df:ce:ec:db:a6:9a:2f:00:6c:ed:
                    28:78:78:13:ce:b3:4e:33:6e:50:45:39:67:b5:e6:
                    d7:a1:53:92:7f:d7:12:75:0a:73:d4:18:8a:b8:5f:
                    6c:19:66:39:69:d2:9f:9c:bd:dc:e4:87:64:42:c6:
                    ec:a6:18:3d:0c:1b:32:19:b7:df:77:58:ba:9a:fd:
                    25:2e:27:75:4b:96:9e:40:a1:18:bb:87:7a:4b:a1:
                    3a:e7:1e:3c:ce:24:83:df:37:c0:48:55:b5:21:fe:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FC:E8:02:11:2B:6E:6D:B1:93:12:0F:03:58:7B:61:E4:78:D0:75
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232302e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:75:f9:9d:a8:27:d9:71:53:e8:35:c2:41:aa:f8:f1:ad:
         1f:57:8c:14:e5:78:f5:a2:00:9d:ac:ae:bb:72:bb:e2:4d:80:
         f2:19:a6:a0:d4:40:2f:b5:13:9a:79:63:93:7c:76:f0:34:9a:
         9b:67:68:1d:6c:8c:27:0b:b8:50:8f:88:5f:1c:a0:50:88:e7:
         2f:33:7b:c5:da:b6:ba:e7:49:8b:16:63:f3:99:3a:3c:db:e4:
         e1:62:35:37:69:02:cb:36:7c:5c:f8:d5:2d:30:d3:c7:4e:89:
         20:61:83:7c:18:9e:73:5a:f4:d0:fa:3f:c6:63:c0:69:38:20:
         3c:b7:36:d2:35:d3:68:38:f9:f7:dc:e6:11:62:40:d4:fc:47:
         68:1e:cd:ed:e0:1d:ca:8e:56:93:a3:e2:94:ea:92:3a:b2:8c:
         f8:f0:67:ec:1e:8a:d7:49:ab:6a:93:3d:82:3a:d0:ee:f0:95:
         2e:dc:f4:c8:b6:60:3b:f6:a5:1e:92:ae:35:a3:b3:1a:9a:b9:
         d1:01:4f:89:e5:be:79:1f:14:d7:31:89:7c:97:3d:64:32:5a:
         41:95:e4:65:54:6e:d4:e4:d2:37:5f:77:05:4e:23:b4:cc:a8:
         0f:60:28:8a:53:98:14:74:91:f6:b7:1b:2e:64:29:5b:35:94:
         0c:b3:fd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:04:08 2024 by rpki-client on console-ams.rpki-client.org